Assess the risk of third-party GitHub Actions

Examples: ,

Actions

Assess all the actions

pytorch/text/test-infra/.github/actions/setup-binary-builds

Models, data loaders and abstractions for language processing, powered by PyTorch

2/10

zendesk/setup-jsonnet

3/10

slsa-framework/slsa-github-generator/__builder_checkout_dir__/.github/actions/secure-project-checkout-go

Language-agnostic SLSA provenance generation for Github Actions

5/10

step-security/delete-deployment-environment

GitHub action to remove an environment and it's deployments. Secure drop-in replacement for strumwolf/delete-deployment-environment.

10/10

Maintained by StepSecurity

step-security/change-string-case-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github Action: Make a string lowercase, uppercase, or capitalized. Secure drop-in replacement for ASzc/change-string-case-action.

10/10

step-security/tag-push-action/__builder_checkout_dir__/.github/actions/secure-download-artifact

Github action to copy/retag multiarch images from one registry to another. Secure drop-in replacement for akhilerm/tag-push-action.

10/10

open-edge-platform/geti-ci/actions/semgrep

A public-facing, centralized place to store reusable workflows and actions used by Geti projects.

8/10

surrealdb/rocksdb/.github/actions/build-folly

A library that provides an embeddable, persistent key-value store for fast storage.

4/10

lukka/run-cmake

GitHub Action to build C++ applications with CMake (CMakePresets.json), Ninja and vcpkg on GitHub.

4/10

Maintained action available

erlef/setup-elixir

Set up your BEAM-based GitHub Actions workflow (Erlang, Elixir, Gleam, ...)

7/10

ministryofjustice/payforlegalaid/.github/build-and-test

8/10

prometheus/promci-images/publish_release

GitHub Actions for handling container images.

5/10

itchyny/s3-cache-action

GitHub Action to save cache files and restore them from Amazon S3

5/10

Maintained action available

openfga/action-openfga-deploy

Github Action for deploying your Authorization Model to an OpenFGA Store

8/10

alexellis/setup-sshd-actor

This GitHub Action sets up an SSH server with the actor's SSH keys found on GitHub, preinstalled.

3/10

googleapis/release-please-action

automated releases based on conventional commits

8/10

grafana/k6-definitelytyped/.github/actions/setup-for-scripts

The repository for high quality TypeScript type definitions.

6/10

dahlia/submark/setup

Extract a part from CommonMark/Markdown docs

4/10

gradio-app/github/actions/publish-pypi

github helpers for gradio repos!

0/10

Maintained action available

anysphere/action-setup

Install pnpm package manager

2/10